Ten Ways to Protect Your Accounts with Strong Passwords

Recently, many of us have been receiving messages that some of our passwords have been compromised. I have written about passwords before but I want to give you another dose of rules, tools, and suggestions to keep you as digitally safe as possible. I have been sitting down with friends and relatives recently and asking them to evaluate both their passwords and how they store and create them. 

Here are some suggestions, rules, and tools:

1. Don’t use the same password for more than one login. If one of those sites has a breach, someone now has your email (or user name) and password. You can be sure they will try it on other sites! 

2. Make passwords long and complex. Use numbers, capital and small letters, and symbols (if the site allows). 

3. Do not, do not, do not, do not keep a list of your passwords on a post-it note on your computer. While a piece of paper in a file might have some degree of security and practicality there are better ways to do this. On Apple products, you can create a password protected note, which is better than having a slip in your wallet – but there are better methods. 

4. I recommend everyone use a password manager. I use 1Password, but there are many others. Apple offers Keychain built into the Apple ecosystem. The main benefit of a password manager is that it stores all your passwords securely and you don’t have to remember all of them. All you have to remember is how to get into the manager (thus the one I use is called 1Password because I only have to remember the password that lets me into my password manager). I STRONGLY suggest looking at a dedicated password manager that is not a locked note, Keychain, or the password saver built into your web browser. 

5. Another benefit of a password manager is that it can autofill your usernames and passwords when you go to a website. It will also remember your password when you use it on a new website (and even offer to create a strong and complex password for you). 

6. A side benefit of this is that, if my password manager does NOT offer me my password on a website that LOOKS LIKE it is my bank, for instances, it is a warning that I might be on a fake website and about to give away my username and password to a hacker! If my password manager doesn’t recognize the website, I need to find out why. 

7. Consider trying passkeys instead of passwords. Passkeys are when you use another device instead of a password. You might use your fingerprint or other biometrics. A website might ping your phone, watch, or other device. You can even purchase an actual digital key that plugs into your computer and lets websites know that it is really you! 

8. Many websites now use one-time password codes instead of passwords. You log in with your email and they send you a code. This is great – as long as you have control over the means of getting that code. If a hacker gets control of your email or phone number, you will be unable to receive these one-time password codes.

9. For this reason (and others), it is critical that you use secure passwords with your high-priority assets: your email account, financial institutions, any website where you have stored a credit card (Amazon), social media accounts (Facebook, Instagram, TikTok, etc), and of course, work-related websites. All of these should be protected with long, complex, and unique passwords – so long and complex that you could never ever remember them. Thus, storing them using a secure password manager would be a good idea (there is a theme here – get it?). 

10. Always, always, always take advantage of two-part authentication when it is available. This is when you get a code sent via text or email or through an authenticator app when you log on to a site for the first time on a new device or browser. This is not foolproof. If someone has your phone, they might be able to use this to reset a password. However, if you receive a message with a code when you haven’t logged in to that website, you know someone else is trying to. 

The scammers are getting more and more clever and devious, as I have written about before. We have to help each other stay safe and protected! While a warning that you have a compromised password may or may not be true, we all could improve our password security. Be safe out there! 

UPDATED: Strategies to Avoid Getting Scammed

The scammers are devious. They are increasingly harnessing both technological and psychological weapons to trick people out of their money – especially vulnerable people like the elderly. 

I have written about scams before, and while the articles and advice in those posts are still relevant, the scammers are escalating their tactics and we need to add some more precautions to our anti-scammer protection system. 

For those who don’t want to read much, here are my anti-scamming suggestions (this is an extenion on the list I wrote here): 

Trust your gut: If you even have a slight inkling that the phone call, email, website, text, or other form of communication is a scam: STOP! We frequently have a little voice in the back of our minds that raises the issue, but we don’t pay attention: PAY ATTENTION! 

Just because they have some information about you, even something as private as your social security number, bank account number, credit or debit card number, address, or date of birth, don’t trust them! Scammers can get this information. Bad actors can access private and personal data. Don’t rationalize that, “this can’t be a scam because they have my…”

If the message is urgent, it is likely a scam. If the message is highly sensitive, it is probably a scam. If the message is emotional, it is likely a scam. If the message is shocking, it is likely a scam. Your grandchild is most likely not in danger. No government agency is coming after you. No one has hacked into your bank account. “You can’t tell anyone,” is a huge red flag! When the person on the phone or the email screams that the house is on fire and you must trust them to put it out, hang up and do the thing next on this list. 

Contact the agency or person in question the way you normally do! If the email or caller says they are from your bank, hang up and call your bank. If they say that there has been a car accident and your relative needs help, call that relative (and if you can’t reach them, call someone close to them whom you trust). As the photo shows, links can look like they are correct and lead you to the wrong website. If you have a browser bookmark for your brokerage account, use that link– never click on links in texts or emails! 

Don’t give ANYONE your private information. Period. Don’t confirm your private information. Period. Of course, if you call your doctor, banker, broker, or other trusted source, you can do that. However, if someone contacts you and claims to be from their office – or even sounds like them – nope! 

Fakes are easy to create! Scammers can spoof phone numbers, so don’t trust the caller ID. Spammers can fake people’s voices, so just because it sounds like that person doesn’t mean it is that person. Spammers make website addresses, links, emails, and phone numbers look like the real thing. That is why you must always use the contact information that you have used in the past and know 100% is, in fact, the real thing – not the link, email address, phone number, or other method that they are feeding you. 

If there is even a tiny chance you are on the phone with a scammer: hang up! Then contact the organization using your regular contact method. Pro tip: if you are on a cell phone call and turn it to airplane mode, the person on the other end will see a “call failed” message. To really sell it, do this in the middle of a sentence or word. 

Don’t use passwords, passcodes, PIN numbers, or other private unlocking strategies in public - EVER. Don’t unlock your phone at the bar. Go inside the bank and cover your PIN number with your hand at the ATM – or better yet, use a teller. Never use passwords on public wifi networks. Learn to use passcodes like your face, fingerprint, watch, or USB keys. 

Don’t do strangers favors: Lots of scammers take advantage of your good nature. They ask to use your credit card at the gas pump because they only have cash. They ask you to loan them money. They ask all sorts of things. The answer is no! While sometimes, they really are people in need: more often, they are scammers. Give to charities and social service agencies and call them when people are in need - if people approach you directly, be suspicious. 

If you have other strategies, send them to me and I will add them here (and credit you, if you are okay with that – I can also credit you with just a first name or initials). 

Here are a few articles to give you the flavor of what scammers are doing: 

“Lake Co. Resident Nearly Loses $20K In PayPal Scam”

“AARP sounding alarm on fraud, offering helpful resources to victims”

“10 Security Settings That Protect Your iPhone From Thieves”

“How to Avoid Pump Switching Scams at the Gas Station” 

“How to Protect Your Parents From Elder Fraud and Scams”

“How to Protect Your Finances From Identity Theft”

“This 'IRS Letter' Is a Scam”

“These Financial ‘Experts’ Got Scammed, so You Can Too (Really)”

UPDATE: 

Some dear friends replied and added the following:

Beware when the person texting you says they can’t or won’t answer a phone call from you because they are “driving”… it’s really because you would instantly recognize that they are not who you think you are texting. If you think about it, people who are driving would really prefer talking over texting as that would be safer!

Many scammers are from foreign countries and English is not their native language. Therefore, be aware that even the SLIGHTEST English grammar or syntax error should alert you that the person is a foreign scammer who has a high level but not perfect proficiency in speaking English.  Even a SINGLE WORD misused that would not be said that way by a native English speaker should be a huge red flag to you.

If a person asks you to pay for an item via Zelle be aware that, unlike a credit card payment, money sent by Zelle cannot be retracted or credited even if you later can verify it was sent to a scammer. Never use a phone number or email link sent by the person to make a Zelle payment, as your money is probably not going to the person you think it is.

If you are purchasing an item and the main message to you focuses on receiving the payment rather than the details of the item itself that should clue you into the fact that all they want is to get your money from you.

If you are communicating with someone via Facebook messenger and then switch to texting but they won’t talk out loud by phone call that’s a clue that they are trying to hide their true identity.

If the party refuses to take a check as payment and insists on using electronic payment via Zelle, Venmo, or PayPal that’s a clue that it’s a scammer, as the scammer wouldn’t be able to cash your check, especially if located in a foreign country,

If the person selling an item says you need to pay them because other people are also trying to buy the same item, be aware that it’s probably a lie and trick to make you pay sooner rather than later.

Try to buy items from established online retailers like Amazon, Wal-Mart, etc, and not from Facebook marketplace or unknown retailers.

If someone asks you to text back a Google phone code and you do they might create a Google Voice phone number that links to your phone, thus compromising your phone! 

Beware of scammers who say that they are checking that you are not the scammer! How ironic! 

Thank you to my friends for these strategies! 

Reading for Treasure: Protecting Your Information and Privacy

Reading for Treasure is my list of articles (and other readings) that are worth your attention. Click here for an introduction.

Once again, here are some articles to keep you safe as you use your technology. Specifically, how to thwart being tracked or scammed by devices, websites, advertisers, and others. 

This video from CNN includes a password tip that is genius and I have never heard of before. I am not going to list it here, but listen for the word “salt” in the video: "Here's how to keep your passwords safe, according to a hacker.” 

Wired provided a simple and common sense list of “6 Things You Need to Do to Prevent Getting Hacked.” Read the article, but I’ll list them here: Use multifactor authentication, get a password manager, learn how to spot a phishing attack, update everything, encrypt everything, and wipe your digital footprint. If any of those terms are foreign to you, take it as a sign you need this article. 

A great compliment to the above article, Propublica’s article, “A Former Hacker’s Guide to Boosting Your Online Security.” provides a straight forward and simple list of ten things to preventing stolen data, identity theft, and other online hazards. Again, I’ll list them here, but read the article for more: stop reusing passwords, delete unused accounts, use multifactor authentication, manage your privacy settings, think before you click, keep your software up to date, limit what you’re sharing online, security your SIM, freeze your credit reports, and back up your data! 

Lifehacker is also a great source for digital safety. Here a short and simple article that lets you know “How to Tell Which Apps Can See Your Private iPhone Data.” It is an older article, but still worth reading. 

This somewhat scary article from The Conversation via Inverse is a good overview of how your use of technology may put your privacy at risk: “Here’s exactly how tech companies and apps conspire to track you 24/7.”

Yes, emails can snitch on you. Many emails report back to their senders if you opened them, when you opened them, and even for how long you engaged with them. Want to stop this? Read this article from Wired: “How to Tell Which Emails Quietly Track You.” If you use Apple devices, this Lifehacker article, “How to Stop Email Trackers on Your iPhone, iPad, and Mac” will help you with this issue and more. 

A new form of hacking is to use free USB charging stations. Apple Insider discusses, “What juicejacking and trustjacking are, and how to protect yourself.” The basic piece of advice here is, if your phone asks you “Do you trust this computer?” or “Allow this device to access.. and you are not connected to your home computer, say, NO! 

How many of us have lost our phones or have had our phones stolen?  We may feel safe because our phone is locked with a passcode, fingerprint, or our face. Lifehacker says, “Your iPhone Is Still Vulnerable When It Is Locked” and then helps you secure it! 

And it is worse than that: Lifehacker provides instructions on how to use screen time on the iPhone to prevent a stolen phone from becoming a stolen Apple account or worse: "How Screen Time Can Save You When Your iPhone is Stolen." 

I am currently reading The Paper Menagerie and Other Stories by Ken Liu

Reading for Treasure: Scamdemic!

Reading for Treasure is my list of articles (and other readings) that are worth your attention. Click here for an introduction!

I have written about scams before and my most recent post deals with some thinking strategies to help us sift through the overwhelming mounds of information (and disinformation) in order to evaluate them well. However, the evil fraudsters are taking advantage of the current crisis to trick people into giving away their money, information, or more; thus here are some articles to help you protect yourself and your loved ones from the evildoers who would trick you. 

CNN’s article, “6 coronavirus vaccine scams that target your money and personal information - and what to do about them” is a short and very clear listing of possible scenarios. It is worth sharing with family-  especially elders! 

Wired has a good review of “How to Avoid Phishing Emails and Scams.” I have also written about this issue, but the fraudsters are getting more and more sophisticated. I also want to note that this article recommends the use of a password manager – and so do I (see below). 

Scamming can pop up in all sorts of places. Lifehacker’s article “Beware of These Creative Online Dating Scams” reminds us that people are trying to trick you even when love is what you are searching for! 

Another way to foil scammers is to improve your security. You must have a password manager if you are going to use complex effective passwords. Since LassPass changed its options, Bitwarden is a good choice if you want a free option. Lifehacker’s article about Bitwarden is worth a read if you want to taste test a password manager: “Bitwarden is Now the Best Free Alternative to LassPass.”

One more Lifehacker article reminds us, “Don't Trust Phone Calls From 'Venmo' or Any Other Service.” When your bank, utility, or other service calls, hang up and call back using the number you would regularly use to reach them – not the number from which the possible fraudster called you! 

Google has created a new feature to help you figure out if the sources that appears in your search are credible and trustworthy. Engadget lays out how to use this feature so you can evaluate sources and be sure you are getting the best information possible: “Google search results can tell you more about a site before you visit it.”

Currently, I am rereading Foundation by Isaac Asimov

A Crisis of Critical Thinking

As a toddler, my son loved trains. We sat by the crossing and waited for hours for trains. Once, as we waited, he proposed a way to make a train arrive: activate the gate. If we turned on the flashing lights and brought down the safety bar, he thought, the train would arrive. From his point of view, it made complete sense: the lights came first, the train came second. When I tried to explain it to him, he was incredulous: I just didn’t want to wait with him any longer. I didn’t know how to turn on the lights and I wasn’t willing to admit it. He WANTED that train to come and my rational (and correct) explanation did not satisfy him. I was powerless to do an experiment. 

I call this toddler logic. It makes its own kind of sense. Toddlers want what they want and they want it now! They are good at figuring out how to get it, even when their methods defy logic, reason, or common sense. 

P.T. Barnum said that there is a sucker born every minute. Like Barnum, there are people who have made the exploitation of toddler logic into a business plan. They are growing rich and powerful making people believe that all it will take for their train to come is to turn on the signal. 

Robocalls, phone scams, phish emails, and other schemes are flourishing. I have written about strategies to prevent falling victim to this kind of nefarious traps. It is a sad statement that being trusting and open can be used for harm. 

It is more than falling victim to fraud. We live in the age of alternative facts and false news. Conspiracy theories and misinformation are so prevalent that it is understandable that some even bright well-meaning folks are deceived, duped, and deluded – because other people make it very difficult to distinguish toddler logic from reasonable, rational thought. This is a crisis of critical thinking. 

What are the barriers to critical thinking? What habits of mind must we practice so we and the people we love do not fall down the skunk hole of toddler logic or worse? 

Critical thinking takes effort and time. Sometimes we don’t want to work that hard. We are not willing to do the heavy thinking that is almost always required to sift through the cacophony of misinformation. It is quicker, easier, and more satisfying to grab the first reasonable or appealing idea and not ponder further. Critical thinking requires intellectual patience and power.  

We must not confuse what we wish to be true with the verifiable facts. My son was invested in a train coming. He wanted to see a train. He was aware that, if we waited too long, I’d take us home and he wouldn’t get what he wanted.  Often, it is not our logic that drives our thinking, but our desires. We aren’t thinking; we are feeling. Because we want a specific answer or conclusion, we rationalize a way to get it. We know the sum of the problem and we fudge the numbers so they add up. 

Complexity is unavoidable, frightening, and not as attractive as simplicity. When the problem is too big, when we are overwhelmed by the complexity of the issue, we are tempted to simplify it. We reduce the problem and thus eliminate the pieces that are getting in the way of solving it – or getting us what we want. How many times have people framed issues with something like, “this seems complicated, but is really simple.” Few important issues are really cut and dried, and while we may argue over them, the problems that are likely to turn us into suckers are usually ones that, when simplified turn us into simpletons. 

Even when they deliver bad news, we must both evaluate and embrace authorities. Remember at the beginning of the pandemic when it seemed like everyone was an expert in medicine? I found myself asking “How do you know this?” and “Is there some research to back this up?” all the time! Yet, experts often disagree. We can’t be expert in everything and thus must rely on specialists to help us. It takes work and is highly complex to evaluate the authorities and weigh their opinions. Reading technical journal articles is both time consuming and not nearly as fun as reading novels! Wading through the opinions of specialists and authorities is like, well, root canal sometimes. Dismissing experts because of their expertise is dangerous; we may not like what the doctor tells us, but if we don’t listen to her, we might pay with our lives. 

Humility allows us to use error to our advantage. People like to be right and hate to be wrong. If we stick our neck out and make a statement, it is embarrassing when we make mistakes. Critical thinking requires error. It requires a process where we evaluate, decide, and then apply our thinking. Sometimes, oftentimes, that means we are wrong. Unless we have the humility and resilience to admit our errors, learn from them, and then change our thinking, we will be stuck. We will be like that person who will not take directions on the road trip. It will be very long, not where you want to go, and there will be no bathrooms.

Thinking is hard work. Critical thinking is complex and intricate work. Without it, however, we turn into P.T. Barnum’s suckers trying to lure trains with our signals. Some might come – but we will not have called them, even if we think we did. 

The Pandemic Proceeds: Looking Back at 2020, Part 2- April and May

February and March introduced us to COVID-19. In April, it moved in. I was living in a state of heightened anxiety. After each walk outside, trip to the gas station, store, or anywhere, I scrubbed my hands. I felt like I was being hunted by an invisible foe. 

April felt like the month of cancelations. We canceled our plans to visit our daughter in D.C. I co-teach the Confirmation Class at our congregation. and we canceled the service and prepared to move it online. We had planned a special family trip to Norway and we began taking it apart. We canceled all service people coming into our home. We canceled our plans to attend weddings, which were then canceled. It was a very different version of cancel culture. 

Meanwhile, my book club chose to read The Doomsday Book by Connie Willis. Strangely, a story of duel pandemics was comforting. 

My friends at Deerfield High School were struggling to teach students online. Students were distracted, upset, and often absent. Teachers were trying to balance their own families’ needs and take care of students. Teaching in an online environment was new to everyone! I helped a few teachers map routes through Deerfield so they could drop off gifts, goodies, and greetings at their students’ homes. 

May years ago, I recorded A Tale of Two Cities on audio as a teaching text. I read and taught it. My colleagues were teaching this way all the time, but it only seemed like the worst of times. 

We made trips to grocery stores wearing gloves. We brought my parents groceries and they brought us food, too. Every time we saw toilet paper, we grabbed it! Our prescriptions arrived by mail. 

It looked like we might want masks, so I ordered some from a DHS alumnus whose business made bed linens and was now making masks. I ordered a lot: some for us, some for the rest of the family. 

I set my parents up on Zoom and helped them use it. I found an old lamp in the basement that would give me more face light when I was on a video call. 

We began to meet people on our patio, outside, masked and distanced. We still called, texted, emailed, and video chatted regularly too. We continued our effort to stay in touch and reach out to friends and family. 

I started a group sourced poem called “When This is Over” on Facebook and published it here. The end of this time felt far closer then than it does now.  

My anxiety kept rising. My emotions were very close to the surface and I had to remind myself frequently about what I could or could not control. 

Many of the appliances in the house were running far more than in the past. My wife needed ice on her back several times a day. We ran the dishwasher constantly and it was spitting out strange melted pieces of plastic. I didn’t even want to think about what would occur if the computer broke or we lost our internet connection! 

Before the pandemic, we spent a great deal of time with my parents, and now we feared that these visits might kill them. We met on patios, but it wasn’t enough. They were still not in the same place about the gravity of the situation. My mother would mock my precautions and tell me to hide in the basement when she was coming over. We would call daily and see each other at least once a week outdoors. 

My wife recovered from her surgery, but she was in the same condition as she was before the surgery. We had unsatisfying telehealth visits with the surgeon. My wife tried shots in her spine. No help. New meds. Didn’t work. Her MRIs looked exactly like the ones from January! She started physical therapy. We looked for a new surgeon and talked about a second surgery! 

We were concerned about our daughter who was working long hours on the Federal Government’s response to COVID in D.C. Our public health expert was going to work herself sick. How do you help someone who is 600 miles away? 

I signed up for an online service that alerted me when disinfecting wipes became available. I was able to buy some once or twice. We shared them with everyone! 

Passover was online. I wondered if it was safe to go to doctor or dental appointments. I was hesitant to go into a building for anything! Although the weather was getting better, the list of people who had died grew longer. Several friends on social media talked about their experience wrestling with COVID. I attended more Zoom funerals and saw postings about the loss of loved ones. 

Throughout the spring, we brought in the mail wearing gloves and then left it on the dining room table for three days before opening it; then we washed our hands. 

Restaurants started doing curbside pick up and we began to order out more. I made signs for the cars that said, “Order for Hirsch, please” on one side and “Thank you” on the other. I participated in a birthday car parade for a friend’s sixtieth. 

The pull of college was still strong for our son. His a capella group wanted to make a video of the concert they planned for the spring. That would mean traveling back to Ohio for several days and staying somewhere – and then singing, an activity that was highly problematic. While he knew it was too dangerous, it was yet another loss. He recorded at home and sent his work in, but it was far from satisfying. 

School was still online. I made a montage for my senior homeroom with the photos I had taken over the years. I sent my former Freshman English students the letters they wrote to themselves on their first day of high school. I emailed my other former students wishing them well. 

Anxiety was growing in the pit of my stomach. I found that tears welled up at surprising times. Our daughter called often. She was working very hard both at her job and with her new puppy. 

My son’s college glee club held a virtual concert using submitted recordings, old video, and recorded material. It was wonderful. It was the first time I sat next to my singer son during one of his concerts. 

My Sunday school students were struggling with Zoom fatigue. Our classes were shorter, so we needed more of them to get ready for an online Confirmation service. 

I continued to be tech support for my parents. They received more than their share of phish and scam emails. We talked, at length, about how to recognize a fraudulent email or text. 

In May, we finally made plans for our daughter to come home. Once her puppy had all his shots, she could make the trek. A long car ride with a four-month-old puppy would not be easy. 

My book clubs met online. I wondered if they would ever meet in person again. I had a reunion with some college friends via Zoom. A friend and her husband did a chamber music concert from their home in Israel via Zoom. The DHS retirees, who usually gathered for lunch in town, had an online get together. All functions of our congregation were on Zoom. The choir met on Zoom to talk about what we would do since we couldn’t sing at High Holiday services. I attended funerals and weddings online. While I have always spent a good deal of time in front of the computer, I was now spending much more time staring into a screen! 

I was still working hard to stay in touch and support my teacher friends. They were barely keeping their eyeballs above water! Yet, the school board berated teachers calling them lazy and said they were shirking their responsibilities. It was shocking and disrespectful. Teachers were working harder than ever! My wife and I wrote a letter to the board expressing our disappointment and outrage. We were not alone. The board apologized. 

I wondered if I had this disease if I coughed or sneezed or caught my breath. Was it my allergies or was it something far worse? 

We became Instacart experts. Many houses were on sale in the neighborhood and they were selling quickly. We waved at people on our walks but crossed the street to avoid them. Not everyone understood the idea of distancing, especially cyclists. Friends started to lose their jobs, get furloughed or reduced. 

At the end of May, my son graduated from college via an online ceremony. There was even a virtual reality component where he was given an avatar and could walk around a virtual campus. It was Minecraft meets Legos. He tried it for a few minutes and then joined us watching the polished video presentation that featured video of my son’s musical groups! I think he liked graduating this way better than all the hubbub of being in a big stadium. The concerts, however, were deeply missed. 

Once he was done with college, the job search began in earnest. He started reaching out to people for informational interviews. By the end of the summer, he had spoken to more than one hundred people in dozens of organizations. He was a networker! 

We had Mother’s Day distanced on my folks’ patio. They still needed quite a bit of technical support but were becoming good Zoomers. I signed them up for Instagram so they could hear a concert by my brother’s daughter. We had several family gatherings in backyards. Thank goodness for nice weather. 

For my birthday, I got Star Trek masks and a tin of Garrett’s caramel corn! I ate it. All of it. I read the nominees for the Hugo awards. All of them. 

Our daughter trekked west over Memorial Day weekend. My son and I met her in Ohio and helped drive her home. We rented a car, sanitized it, planned the logistics, and drove my daughter and her dog to Illinois in the pouring rain. 

Finally, all of us were home and safe. For the first time since this started, I could breathe easier. For the first time, I slept well. We would face the summer together. 

Scram Scam: Some Guidelines to Prevent Scammers From Tricking You!

As we prepare to return to school, we must remember not to let down our guard and be duped by unscrupulous cons. There are too many people trying to take advantage of our trust and goodwill. Here are a few guidelines to help you from becoming another victim:

Email:

This article on Apple World Today cites Verizon research stating that 30% of emails designed to trick you (called phish emails) are opened! The article goes on to make several good suggestions about spotting a phish email. Here are a few suggestions to avoid email scams:

Don’t click on links in emails: This is how scammers trick you. The typical phish email appears to come from your bank and says that your account is frozen (or some other terrible thing) and you need to re-enter your password. The email looks like it comes from your bank and, when you click the link, the website looks like your bank’s website. But it is not! When you enter your information, it gives you an error message because, of course, it is not the real website. You have just given the bad folks your bank user name and password. Recently, scammers have used compromised email addresses to send phish emails. So it may be that the email appears to come from someone you know! No matter who sent the email, don’t click on the links – period!

Contact the sender – not through the email: If the email appears to be from your bank, don’t click on it, call your bank using the number on your debit or credit card or on your statements. If the email says there is a problem with your Apple ID, go to Apple.com on your own and log in or call Apple on the phone. This rule will also apply to phone scammers (which we will discuss shortly). If the sender of the email is a friend, call them. Replying to a scam email from a friend will only tell the scammer that you read the email. If you have a second email for your friend, try it or contact them through social media. If my email was hacked, I would like to know about it. 

Look at the sender’s email address closely: As the article linked above states, often phish emails look like they come from sources you trust. Your email has a name associated with it. If I send you an email, you won’t see the actual address, you will see my name. If you click on or hover over my name, you will see the actual address from which I sent the email. If I receive an email from American Express, I would expect that the sender has an American Express email. The label may say American Express, but if I go to the “sent from” line and look at the email, and it says something else, it is probably a phish.

Web:

Scammers can get you through more than email. This BottomLine article talks about how the scammers might trick us by creating websites that are one letter away from the sites we are trying to reach. The example in the article is that you type Netflix.co and forget to add the last letter. This reaches a website that looks like Netflix, but is, in fact, a way to harvest your Netflix password!

Examine the URL: Just as you examine the email address, look at the web address (called a URL = Universal Resource Locator) and make sure that it matches the site you are trying to use. If I am trying to look at my Bank of American account, the website must be bankofamerica.com. Please note that the address has the “of” in it. I discovered that bankamerica.com is not a functioning web address – yet.

Make sure the site uses https: In front of the web address are the letters http, which stand for hypertext transfer protocol. That means you are looking at a regular website. However, a site that adds an S means that it is secure! Here is an article from Computerworld explaining why it is so important to make sure that any site on which you enter personal information has that S and is secure.

Don’t enter any personal information on any website if you are on a public network: If you are in a hotel or at a coffee shop or in a library, you are on public wifi. The network that you are using is not unlike the old party lines where everyone could hear everyone else talking. With the right technology, a person can see the activity on a public website. Don’t enter passwords, credit card numbers, or any personal information unless you are on a secure and private network either at your home or work place. This is also why some people are using encrypted virtual private networks to protect their information. Click here to read an article on VPNs.

Use resources like Web of Trust: There are browser extensions (apps that run in Chrome, Safari, Firefox or other browsers  - you aren’t still using Explorer, are you?) and give the browser additional functions. I like Web of Trust because it presents me with a green, yellow, or red circle indicating the safety of the website I am using. It will present me with an alert I have gone to a problematic or scammer website. Norton also lists ten signs that a shopping site is secure which could be applied to any commercial website.  

Phone:

Don’t answer phone calls from numbers you don’t recognize: If the call is from a legitimate source, they will most likely leave you a voice message or contact you another way. If you are concerned you have missed an important call, call the number you have rather than the number that called you. Recently, scammers have made their number look like your number, so it appears to be coming from a local source. Don’t be tricked: an unknown number is unknown even if it has the same exchange or appears to come from your town.

Don’t talk to strangers on the phone: One scam worked this way: when a person picked up the scam call, the scammer would immediately ask, “Can you hear me?” When the person answered, “Yes,” their response was recorded and could be used elsewhere! If you pick up the phone, perhaps thinking it is from a legitimate caller, and discover it is from an unsolicited source – hang up! If the source says they are the IRS or your bank, hang up and call that source using a number you have used in the past successfully.

Don’t give personal information over the phone: Don’t provide your credit card, social security number, or other personal information over the phone unless you have made the call yourself and are 110% sure you are really talking to Ticketmaster, your bank, or your grandchild. If someone claiming to be from your electric company calls and says they need your bank account number, tell them you will call them back – and then use the number on your bill! 

Other Thoughts:

If you have any doubt at all, assume it is a scam: While I’d like to think the best about people, scammers are very good at tricking us. The latest scam sent an email that included a link that, when clicked, opened a Google drive window and asked the victim to sign in to allow an app access to their account. It not only looked real, it was the real Google sign in. The trick was that the scammer’s link (thus the “don’t click on links” rule) connected the victim to the scammer’s app! It tricked professionals! However, a little more care and the simple rule of don’t click on links in email could have saved them! Trust your gut reaction and err on the side of caution.

Go slowly and double or triple check: If your grandchild, niece, or neighbor calls and says that they are stuck in a foreign country without money, check with other people (like their families) before giving the caller your information. Scammers make things seem like an emergency and that, if you don’t act immediately, horrible things will happen. Horrible things will happen if you rush and act too quickly.

Travel Scams: Here is a fantastic infographic listing forty travel scams and the countries in which they have been reported. It is worth a look before you go on a trip.

Use strong passwords and two part authentication: I have written about ways to prevent your accounts from being hacked using better passwords, password vaults, and making your logins to important accounts harder to hack.

If you believe you have fallen for a scam and given away your information, you need to notify the appropriate authorities as soon as you can. Lifewire has a good article telling you some first steps to take if you have fallen for a scam. Your local police department is where you would report any sort of crime. Here is a link to the FTC’s scam alert page. It is a good place to look if you are wondering, “might this be a scam?” With a little knowledge, hopefully, we can stop the scammers from succeeding!